Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/uqrv_E5IqV1YG-EZVON1npiMqCM.roa
File:                     uqrv_E5IqV1YG-EZVON1npiMqCM.roa (raw, json)
Hash identifier:          3zU/o0jI+C5o8lnyjnxI2XoHMqFbN78IZu0njDY+LEg=
Subject key identifier:   BA:AA:EF:FC:4E:48:A9:5D:58:1B:E1:19:54:E3:75:9E:98:8C:A8:23
Certificate issuer:       /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial:       0477A08C
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/uqrv_E5IqV1YG-EZVON1npiMqCM.roa
Signing time:             Sat 01 Jan 2022 00:55:19 +0000
ROA not before:           Sat 01 Jan 2022 00:55:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39020
IP address blocks:        193.30.100.0/24 maxlen: 24
                          2a07:f7c7:ffff::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74948748 (0x477a08c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
        Validity
            Not Before: Jan  1 00:55:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=baaaeffc4e48a95d581be11954e3759e988ca823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:29:11:2b:9f:c8:1e:c9:e3:02:63:8b:6c:8d:
                    57:38:40:e6:c5:d0:14:8f:d9:e9:74:35:35:45:37:
                    38:7f:72:fa:b1:d2:b4:93:a7:67:18:4b:6a:56:ed:
                    34:88:fb:4b:43:6a:a1:00:51:85:09:e7:d7:ae:e7:
                    df:75:f9:ef:1c:5a:ec:07:65:d6:49:19:ec:4f:1c:
                    b9:07:8f:59:d4:96:50:34:7e:eb:8e:f1:d9:d1:ee:
                    87:7e:34:19:7c:22:81:18:dd:c1:45:77:a3:12:5a:
                    d8:4c:a4:6c:90:c4:a5:aa:14:54:fa:c5:21:bf:69:
                    f4:f4:db:a0:9b:d3:04:b0:dd:4b:da:d8:c1:3c:76:
                    04:99:f7:e7:e4:cb:ba:f5:67:79:39:54:93:b0:3a:
                    e6:20:98:90:6b:39:49:94:7f:31:ef:f3:63:0e:71:
                    55:96:bb:10:75:be:6c:83:f7:a0:5e:cb:07:6d:af:
                    c6:db:c6:84:9b:86:06:8c:e2:ef:98:d6:35:91:6a:
                    a8:08:53:ad:62:5b:97:70:2e:11:fa:91:b2:cb:03:
                    c9:20:40:0a:45:e4:da:09:a5:b8:68:f8:c1:38:d1:
                    0c:70:47:17:a9:85:23:1e:0a:07:3f:e4:5f:d1:04:
                    bf:16:ec:dd:54:ac:24:8d:b4:0b:2b:f2:95:31:ee:
                    eb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:AA:EF:FC:4E:48:A9:5D:58:1B:E1:19:54:E3:75:9E:98:8C:A8:23
            X509v3 Authority Key Identifier:
                keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/uqrv_E5IqV1YG-EZVON1npiMqCM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.30.100.0/24
                IPv6:
                  2a07:f7c7:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:f8:ff:d8:57:cb:0a:c5:a9:f2:00:28:e5:1d:bf:34:df:f7:
         e8:74:c2:08:e5:f7:c2:67:f8:bd:96:9b:96:6b:b0:2b:e0:ec:
         20:70:21:75:7c:0f:4c:38:d3:52:0d:1a:bb:cf:9a:58:d6:b4:
         15:2f:42:94:28:29:f1:fd:89:0c:47:50:4c:dd:ec:63:75:b7:
         e5:e0:5c:bb:6d:56:c6:15:df:42:7b:69:ae:0a:2f:1e:16:f9:
         9e:05:9c:60:a1:4d:27:d2:43:3c:ad:3b:12:a5:75:8b:71:bf:
         e0:35:58:3d:f6:01:7e:fa:8c:6b:a5:a9:af:0c:bd:aa:a5:39:
         e5:19:59:6a:28:47:e5:7e:1f:fb:dc:70:2b:9f:2d:07:6b:a2:
         8c:d3:0b:ef:a8:70:62:95:2e:13:6c:e9:b1:db:f8:14:a4:14:
         a1:de:90:a3:d1:7a:cb:f9:91:a5:ff:84:39:c4:c6:9f:d0:20:
         22:a1:ef:b5:92:6e:41:c6:66:fe:21:66:ff:4c:88:f0:3e:08:
         9d:45:48:2c:46:8f:48:e0:43:89:cb:23:79:17:8d:0f:c0:ae:
         78:41:6a:e2:c8:a6:b6:78:3e:22:00:0d:be:60:9a:12:eb:54:
         90:3e:11:01:b0:9d:48:21:ec:db:60:ca:f8:c2:f0:fa:4b:d8:
         39:66:41:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:44 2025 by rpki-client